Bill would require businesses and organizations to adopt security protocols to reasonably protect their databases from unauthorized access. It would also require information brokers – companies that amass, organize and sell vast amounts of consumers’ information to third party buyers for a profit – to give consumers the right to know what data information brokers are collecting on them and correct any inaccuracies they may find. The bill would elevate federal law over state breach notification regulations, but it would allow state law enforcers to bring actions against those who violate the bill’s provisions.”]
Source: https://www.healthcareinfosecurity.com/minor-changes-urged-for-data-breach-bill-a-2944